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IN THE ABSTRACT OF THE DISCLOSURE: 

Please replace the original abstract with the following abstract. 
ABSTRACT OF THE DISCLOSURE 

Th e r e is prov i dod an A n address translator havim- has fe e-functions to 
prevent, in the-communications via-4he- which involve address translation, 
transmission of packets having no correct destination and transmission source 
addresses which wil l cause troub le s in th e n e tworks and to urge an administrator to 
take adequate measures for reception of the-relevant packets. This address 
translator stores a_discriminator to discriminate temporary addresses. Mor e over, 
whe^ -When the original address is registered as the-ajemporary address at th e t i m e 
of a s s i gnm e nt of the t e mporary addr e ss of th e receiving sid e host s tart e d when the 
name solution is performed, assignment is rejected to prevent transmission of a 
packet from the transmitting side host by returning a response for name solution 
error to the transmitting side host. In addition, when ^transmission source address 
before translation and ^destination address after translation are registered as the-a 
temporary address, the received packet is discarded. Mor e over, W hen assignment 
of the temporary address is rejected and the packet is discarded, a message is 
transmitted to an alarm device or external host to not i fying communicate the event to 
an administrator. 
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TITLE OF THE INVENTION 

ADDRESS TRANSLATOR AND METHOD FOR MANAGEMENT OF 
ADDRESS TRANSLATION RULES 



5 BACKGROUND OF THE INVENTION 
g^ulJ uil L he Invention 

The present invention relates to an address 
translator for^mutual connection among a plurality 
of communication networks in which address 
10 translation is required for discrimination of hosts 
for mutual communication. 

Doocription - of Related Art . » 

jjt protocol translation is^known aawi technologyj to 

X 

realize communication between a network to which a certain 
15 host belongs and a network to which a communication partner 
belongs under the condition that different communication 
protocols are used in these networks. For example, as -fefee^ 
Internet Protocol (hereinafter/ referred to as "IP"), the 
Internet Protocol version 4 (hereinafter! referred to as 
20 "IPv4") is used at present at fete every oornor ^in the world. 
However, is now in tiro fuitt- shortage of available 



addresses^and ^theref ore^feke Internet Protocol version 6 
(hereinafter^ referred to as "IPv6") has been proposed in 
order to solve this problem. 



} 
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^gince it is substantially impossible^ howo¥cr / to J^i^ 
/\ 

shift the Internet Protocol to IPv6 from IPv4 in direct , 
introduction of fete^system to connect through the protocol 
. thefts l^t- ,i nijil Ire (^network using IPv4 and -teke^ network using 
' 5 IPv6^has also bee n propose d. As^fc4» practical translation 
systems, the NAT-PT^described in the RFCs (Request For 

Comments) 2765 and 27 66* published from the IETF (Internet 

Engineering Task Force) ^ and the SOCKS64^described in the 

RFC3089^and the transport relay/described in the RFC3142jor 

10 the like are known. 

These translation systems are basically intended to 



translate the formats of jIP packet between &am IPv4 and IPv6 
In this case, since Stee address translation is also 



performed between tste IPv4 and IPv6, it is i roquianw to 

15 generate fetfe^translation rule for the IPv4 address andjIPv6 

address before the translation and then maintain the&$t 

address translation rule. This translation rule is 

previously set statically in some cases %orj|created 

*± J 

dynamically for each generatio^ of /communication . In the 
20 latter case, j^name resolution of^DNS (Domain Name System) is 

utilized to start generation of the translation rule. 

The DNS is^fctee systemj^to translate fete names which are 

written a string of characters for easier understanding 

by people|| into ^fe=e IP addresses . The operation to translate 
25 the names into tte IP addresses is called isfee name 
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resolution. At present, almost all applications on the 

Internet obtain the IP addresses of -fefee^ communication 

partner by utilizing this DNS. 

- The IPv4 -IPv6 translator always monitors the messages 

of j DNS ^exchanged to start fefaeji communication by utilizing 
it 

this f act^and^generates the IP address translation rule when 
the name resolution request message is issued. The 
practical operate 

the example of ^communication ^originated toward an IPv4 host 



;ionSiwill be described below . considering 



10 from an IPv6 host. , 

First, an IPv6 host inquires^ an IPv6 address of the 
receiving side host fcojja DNS proxy server. Next, the DNS 
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proxy server also - I n quiroo f to the other DNS servers and 
receives, as fctrej^ response to this request, the address of 
the receiving side host . Tho DNS projcy aeivei updates ^ When 
the received address is the IPv4 address ,^the IPv4 address 
in the response message to a temporary IPv6 address^and then 
returns this temporary IPv6 address to the IPv6 host. In 
this case, the IPv4 -IPv6 translator gonoratcc , in 
20 cooperation with the DNS proxy server,^ the address 

translation rule under the correspondence between the IPv4 
address before updating and the updated temporary IPv6 
address and^ thereafter^ stores this rule within the server. 
The transmitting side IPv6 host transmits IPv6 
25 packets to the temporary IPv6 address of the receiving side 
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host n u tificify by the name solution of/^DNS^as described above . 
Si this Riming , the source address of packets is the IPv6 
address of the transmitting side host itself. These IPv6 
packets are ©race (^received by the IPv4-Ipv6 translator. 



5 Upon reception of the IPv6 packet, the IPv4 -IPv6 

translator searches first^the IPv4 address corresponding to 
the destination IPv6 address of the IPv6 packets from a table 
storing the address translation rule (hereinafter)/ referred 
to as the "address translation table"). In^ this ^timing , 

10 since the destination address translation rule is already 
generated by the name resolution of^DNS, the object IPv4 
address can be obtained. 

Next, the IPv4 -IPv6 translator searches^the IPv4 
address corresponding to the IPv6 address of the 

15 transmission source of the IPv6 packets from the address 
translation table. However, since the translation rule of 
the transmission source address^iss not yet^generated is^this 
^timing , the object IPv4 address cannot be obtained. 
Therefore, the address translator newly assigns tefre/^ 

20 temporary IPv4 address for the IPv6 address of the 

transmitting side host and then generates the address 
translation rule through correspondence between these two 
addresses and also registers it Ee^the address translation 
table . 
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When the translation rule of the transmission source 
address is generated and the IPv4 address corresponding ^ 
respectively^ to the transmission source and destination can 
be obtained, the IPv6 packets are translated to the IPv4 
5 packets^ where the transmission source and destination 
addresses are updated respectively to the corresponding 

A* 

IPv4 address^ and i^are then transmitted toward the 
destination. Thereafter, since the translation rule of the 
transmission source address and destination address is 

10 already generated for the packets transmitted between both 
hosts, the packet translation is performed with reference 
to the translation rule. 

Here, the address translation rule ^generated 
dynamically is onlyyytemporary rule, and^ therefore^ this rule 

15 is discarded when/ communication is terminated. 

In/above^ example, the communication toward the IPv4 
host from the IPv6 host is discussed, but fetee^ communication 
toward the IPv6 host from the IPv4 host and trfeej^communication 
which requires address translation between the IPv4 hosts 

20 (for example, communication between two IPv4 private 

networks in which addresses may be overlapped) also generate 
fefeej^address translation rule in the sequence described above 
to realize %feeAcommunication through the address 
translation . 
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In addition, even when the communication protocols 
other thanilP are used, it is also possible to generate feh© A 
rule for^mutual translation of ^ discriminator of hosts^ 
depending on the protocolj can b<a gonoratod in the same manner 

5 as that described above by providing a means to establish 
correspondence between the information to discriminate the 
host in each protocol^ such as the IPv4 address and IPv6 
address and the information to uniquely discriminate the 
host*, not depending on the protocol. 

10 As is obvious from^above description, in -feite K 

communicationithrough address translation, the destination 
address af terj^update by the address translation process has 
to be the address given actually to the host (hereinafter i 
referred to asA"native address"). Moreover, the 

15 transmission source address bef ore^update by the address 

translation process also has to be the native address. 

If the destination address af ter^update by the address 

^± 

translation process is a temporary address , ^following two 
kinds of failures may^k o t hought . . 

20 First, when a host having an address^matched with the 

destination address af terjupdate process does not exist, the 
packets transmitted from the address translator through 
address translation do not have any destination. 

Second, when an address^prese t as fetse-/ temporary 

25 address is overlapped with the address of^host which 
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actually exists, the packets transmitted from the address 
translator through address translation reach^unexpected 
destination. 

When t^i^address solution, by^DNS is utilized to start ^ 
generation of fete^addr^sj translation rule, fefaejsecond 
failure may be e c tTim£t^^^ t o occur. 

Moreover, if the transmission source address before y\ 
update ^through^address translation process is a temporary 
address, another host which is given the^address cuam e as the 
transmission source address after^update process can be 
a oc taimated to exist, andxtheref ore .the hosts in the receiving 
s i de^ c a t iiwa fee the packets as fefeyt ^transmit ted from another 
host. Accordingly, it becomes possible for malicious hosts 
to make a false access to a certain host or server by 
pretending to be^the other actual hosts. 

As described above, when the transmission source 

address before address translation is a temporary address 

or when the destination address after address translation 

2v 

is a temporary address in tetejtcommunication which requires 

C^tM^ -jH^t t***^ f * 

address translation, there is eon^i rfrg^ad a foai^^ur ^ 

£^ 

occurrence of^f ailure in the network which is accommodating 
the transmission destination hostjbecause the packets^given 
such/ydestination addressj^exist . 
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SUMMARY OF THE INVENTION 

An object of the present invention is to provide 
an address translator having, in order to prevent 
a network failure in communication which 

5 requires address translation, a function to inopoct i 
whether fatee ^transmission source address before 
address translation is not a temporary address or 

a function to | iiwp€ ' C t whpMi a r te i fro destination 

address after address translation is not a temporary 
10 addr es s . 

The address translator of the present 
invention comprises an area to store -fefe=e information 
to discriminate native addresses and temporary 
addresses among a plurality of corresponding 
15 addresses in association with the address 

translation rule in an address translation table. 
Therefore, this address translator creates a 
translation rule by assigning temporary addresses 
to native addresses to simultaneously store the 
20 identification information at the time of 

registering the translation rule to the address 
translation table. 

Moreover, the address translator of the 
present invention searches the address translation 
25 table when it is requested to assign a temporary 
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address to the addr es s^ aotificd from the DNS server 
in the name resolution/ by the DNS in order to find 
•eastfe the translation rule of the address ^otil Q """ 
from the DNS server. When the target translation 
rule is found, the address translator judges, from 
the identification information, a temporary address 
among the corresponding two addresses conforming to 



the translation rule. When the address^ BOti f i ed 
from the DNS server is registered as fetoeJJ temporary 
10 address in the address translation table, ^response 
o £ c it i- o r is returned to the address request by using 
the DNSjbecause the address where the destination 
is replaced becomes a temporary address at the time 
of address translation. 

15 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a s t r uc t ura l^di agram of an IPv4-IPv6 
translator ; 

Figs. 2A and 2B are at^uo LuijX-1 diagrams of the 
20 IP address translation tables of the IPv4-IPv6 
translators of the prior art and the present 
invent ion; 

Fig. 3 is a flowchart illustrating the sequence 
of the process to assign temporary addresses when 
25 a query of the DNS is issued; 
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Fig. 4 is a flowchart illustrating the sequence 
of the IP header translation process; 

Fig. 5 is a schematic^diagram of a communication 
network connecting fefee/ IPv4 network and fefee/IPv6 
5 network via feteAl Pv4 - IPv6 translator; 

Fig. 6 is a sequence diagram forename solution 
of an IPv6 host by an IPv4 host; 

Fig. 7 is a sequence diagram^when an IPv4 host 
transmits fcfee^f irst packet to an IPv6 host after the 
10 name solution of the IPv6 host by the IPv4 host; 

Fig. 8 is a sequence diagram j^when an IPv4 host 
transmits tstee^second and successive packets to an IPv6 host 
after the name resolution of the IPv6 host by the IPv4 host; 

Fig. 9 is a sequence diagram^ when an IPv6 host 
15 transmits packets to an IPv4 host after the name resolution 
of the IPv6 host by the IPv4 host; . . . 

Fig. 10 is a sequence diagram^ when a source address 
is overlapped with a temporary address at the time of 
assigning a temporary address of an IPv4 host when an IPv6 
20 host issues a query of the DNS ; 



Fig. 11 is a sequence diagram^when an IPv4 host makes 
access to an IPv6 host using a false temporary address as 
the transmission source address; 
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Fig. 12 is a schematic ) diagram of a communication 

network connecting two IPv4 networks of different address 

systems via an IPv4 -IPv4 translator; 

Fig. 13 is a a truatural diagram of an IP address 

5 translation table of an IPv4-IPv4 translator; 

Fig. 14 is a sequence diagram^when an IPv4 host 

performs the name solution of an IPv4 host of a communication 

£± 

partner belonging to a network of^dif ferent address system; 
Fig. 15 is a sequence diagram^ when an IPv4 host$ 

10 transmits fcte^f irst packet to an IPv4 host of a communication 
partner after the IPv4 host has completed the name 
resolution of the IPv4 host of the communication network 
belonging to aj| network of^different address system; 

Fig. 16 is a sequence diagram^when the source address 

15 is overlapped with a temporary address while the temporary 
address of an IPv4 host belonging to a network of^dif ferent 
address system is assigned i^the Limlny jjthat the IPv4 host 
issues a query of the DNS; and , 

Fig. 17 is a sequence diagram^when an IPv4 host makes 

20 access to an IPv4 host of a communication partner belonging 
to a network of^different address system using a false 
temporary address as the transmission source address. 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
Embodiment 1 

A first embodiment of the present invention will be 
described with reference to the accompanying drawings. 

5 Fig. 1 is a structural ^diagram of an IPv4-IPv6 

translator ao thc^ f irst embodiment of the present invention. 

This IPv4-IPv6 translator is located between the IPv4 
network and the IPv6 network to roalj«o j communication 
between an IPv4 host and an IPv6 host through IP header 

10 translation of the IPv4 packets and IPv6 packets^ and^ 
comprises an IP packet I/O interface 12, an IP header 
translation module 13, a temporary IP address assignment 
module 14, an IP address translation information manager 15, 
a controller 16, and a console interface 17. Moreover, this 

15 IPv4-IPv6 translator is connected with a console unit 11 via 
a communication line 18. 

The console unit 11 establishes operations of the 
IPv4 -IPv6 translator and displays/^operating condition 
thereof andjis comprised, for example, of a display unit^such 

20 as CRT or the like, an input unit^such as a keyboard^and an 
electronic device^ such as CPU and RAM. 

The IP packet I/O interface 12 has a function to 
transmit and receive feJsee IPv4 packets and IPv6 packets 
between the IPv4 network and the IPv6 network^ and^is 
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configured, for example, with an electronic devicevsuch as^ 
CPU andfyRAM. 

The IP header translation module 13 has a function to 
translate IP headers of the IPv4 packets and the IPv6 packetSv 
and*is comprised, for example, of an electronic device, such 
as^CPU and^RAM. 

The temporary IP address assignment module 14 has a 
function to assign a temporary IPv4 address or a temporary 

it 

IPv6 addresses requiredvand^is comprised, for example, of 
an electronic device^ such as^CPU and^RAM. 

The temporary IP address assignment module 14 pools 
one or more IPv4 addresses, selects only one address^not^used 
from the IPv4 addresses pooled for the hosts connected to 
the IPv6 network and then assigns this selected address as 
15 a temporary IPv4 address . 
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^Moreover, the temporary IP address assignment module 
14 pools a prefix expressed with a numerical value of 96 bits^ 
generates a numerical value of 128 bits for the hosts 
connected to the IPv4 network by putting the prefix of 96 

20 bits before the IPv4 address expressed with a numerical 
value of 32 bits^and assigns this numerical value of 128 bits 
as a temporary IPv6 address. 

The IP address translation information manager 15 has 
functions for management, reading, adding and deletion of 

25 the information for translation of the IPv4 address and IPv6 
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address \ and ^is comprised, for example, of an electronic 

J & & 

_ device^such as^CPU andjRAM. The interior of this IP address 

translation information manager 15 is further divided into 
an IP address translation table 150, an IP address checking 

5 module 153 and a table searching module 154. 

Figs. 2A and 2B are s tructural diagrams of the IP 
address translation table 150. Fig. 2A ^s^the^IP address 
translation table of the pafior ai^t , while Fig. 2B is /the IP 
address translation table of the present invention. In the 

10 ^ pirioT w t, only entry o f the IP address translation table 
150 is provided with only an area 151 to store the IP address 
translation rule. Meanwhile, the structure of the present 
invention is characterized k i*i comprioing an area 152 to 
store^discriminator of temporary addresses in addition to 

15 the area 151 to store the IP address translation rule. 

The IPv4 address in n iLiliTiljwi th a numerical value 

of 32 bits^to the areajto store the IPv4 address in^the area 
151, while the IPv6 address, with a numerical value of 128 
bits^to the area^to store the IPv6 address in the^same area^. 

20 To the area 152 to store the discriminator of 

A 

temporary address, 0 is stored when the IPv4 address is a 
temporary address and the IPv6 address is a native address, 
while 1 is stored^when the IPv6 address is a temporary 
address and the IPv4 address is a native address. 
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The controller 16 has a function to control ^f* 1 
structural element of the IPv4-IPv6 translator j and^jis 
comprised, for example, of an electronic devicejsuch as^CPU 
and^RAM . 

5 The console interface 17 has a function to transfer 

instructions inputted through the console unit 11 and 
transfer messages outputted from the controller 16 to the 
console unit ll.andj^is comprised, for example, of an 
electronic device^ such as^CPU and^RAM. 

10 The IP address translation information manager 15 

tcanomits , upon reception of an instruction displaying^ 

contents of a part or the entire part of the entry of the 

IP address translation table 150 from the console unit 11 . J**-** **"*^ 

A 

a message describing the IPv4 address, IPv6 address, native 
15 address and temporary address of the relevant entry to the 

console unit 11 through the console interface 17. 

Next, operation of each module of the IPv4 -IPv6 

translator in the temporary address, assignment process and 

IP header translation processes* be started when the query 
20 to the domain information of DNS is issued^will be described 

below sequentially . 

Fig. 3 is a flowchart showing the procedure s^of the 

temporary address assignment process when a query of^DNS is 

issued . 
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The IPv4 -IPv6 translator 1 is connected with a DNS 
proxy server via a communication line. 

The DNS proxy server receives a query of domain 
information from hosts within the IPv4 network and IPv6 
5 network in accordance with the DNS technology described in 
the RFC104 and RFC1886 or the like, transfers the query to 
the DNS server within the IPv4 network or IPv6 network and 
then returns the domain information obtained to the query 

source hosts. jU, ^ ^ 

10 The DNS proxy server obtains, when^kinds of addresses 

ar e eULf foront in the query received from the host and in the 
answer received from the DNS server, a temporary address/ 
from the IPv4 -IPv6 translator| belonging to the^kind ftaifte 
as the query from the host and then returns an address answer 
15 of the DNS response from the DNS server to the query source 
host by generating the DNS response updated to the temporary 
address obtained. However, if acquisition ofj^ temporary 
address fails, an erroneous DNS response is returned to the 
query source host. 
20 The IPv4 -IPv6 translator 1 receives a message %>ifeh j^the 

IP packet I/O interface 12 when the message to request a 
temporary address arrives from the DNS proxy server and then 
transfers this message to the temporary IP assignment module 
14 . 
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In order to check whether a temporary address is 
already assigned for a source address no ti f ie.d y.fr om the DNS 
server by the DNS proxy server (hereinafter) referred to as 
"original address") , the temporary IP address assignment 
module 14 issues a query f orjytemporary address corresponding 
to the original address to the IP address translation 
information manager 15. The original address is described 
in the message for requesting the temporary address. 

In the IP address translation information manager 15, 
the IP address checking module 153 searches the IP address 
translation table 150 to find out the original address. As 



a result, if the target entry cannot be found, a message 
suggesting no existence of^entry is nut, i f Jrud j^to the 
temporary IP address assignment module 14. 

The temporary IP address assignment module 14 judges , 
upon reception of message suggesting no-existence of * 

entry, jthe temporary address is not yet assigned, newly 
assigns a temporary address and registers it to the IP 
address translation table 150. In this case, the 
discriminator of ^temporary address is also registered to the 
table. Thereafter, the temporary IP address assignment 
module 14 generates a response message including the newly 
assigned temporary address and then returns this message to 
the DNS proxy server through the IP packet I/O interface 12. 
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Meanwhile, when the entry including the original 
address is found as a result of A table search, the IP address 
searching module 154 transfers Jlcontents of the relevant 
entry to the IP address checking module 153 . ^ j^Jk^y^jg 

This IP address checking module 153 checks/\whether^\ 

— A 
attribute of the original address is/native address or^ 

temporary address by referring to the discriminator of 

temporary address in the entry received. When^the original 

address is v<K~i-f i-ed -fe'liaL iL Ife registered as the native 

address as a result of jpddress check, the IP address checking 

module 153 judges the normal condition where the temporary 

address is already assigned and transfers the temporary 

address described in the relevant entry to the temporary IP 

address assignment module 14 . 

The temporary IP address assignment module 14 

Uiuiiokuii u, upon reception of the temporary address from the 

IP address checking module 153 ,^a response message including 

the notified temporary address and returns this message to 

the DNS proxy server through the IP packet I/O interface 12. 

the original address has been registered as fciie/\ temporary 
address, the IP address checking module 153 notifi « Qo r fco ^the 
temporary IP address assignment module 14^ that a failure 
™ in the original address. 
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temporary IP address assignment module 14 
\ 

Hr-r an rvfeg jay , upon reception of a failure in the original 
address from the IP address checking module 153, fa response 
message indicating that assignment ofj^temporary address has 

5 failed and^returns this response message to the DNS proxy 
server through the IP packet I/O interface 12. Moreover, 
the temporary IP address assignment module 14 transmits the 
message no t nfyinc^ that assignment of temporary address has 
been requested to the temporary address to the console unit 

10 11 through the console interface 17. 

The present invention -dj& qcr^^ specification 
also has a function to prevent teka£jfctee packet which is given 
the transmission source address or destination address im 
Lwii&uii ' fcJfecd to the network accommodating the destination 

15 host when the transmission source address before address 
translation is a temporary address or when the destination 
address after address translation is a temporary address. 
Moreover, the present invention further has a function to 
^ HoTwniy yoccurrence of this situation, if it has occurred, to 

20 an administrator in order to urge him to take a proper 
measure. 

In other words, the address translatoryy doccribed in 
this embodiment searches the address translation table at 
the time of executing the address translation process in 
25 order to find «EEt the translation rule of the destination 
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address recorded in the packets received and the translation 

rule of the transmission source address of the same packets. 

When the target translation rule is found, the address 

translator judges which address among two addresses in the 

corresponding condition in the translation rule is a 

temporary address from the aforementioned discriminator. 

In the case where the transmission source address' etee^ rxbcd 

A 

in the received packets before the translation process is 

£\ 

registered as tS^temporary address or when the address to 
update the destination address doccriber dj in the packets 
received is registered as tiK ^temporary address, the address 



translator discards the packets received. * 

Moreover # ^the^addr es s translator d e|cribed^iin ^ this 
embodiment not^f i -e^ a message indicatingjjoccurrence of a 
15 failure to the administrator/ with the yibn jj^means 




described above in the casesj where the means for no(ja-ijy i iuai ^ 



occurrence of a failure to the administrator is provided and 
the address ** e iLir±ca j|f rom the DNS server is registered to 
the address translation table as fehre ^temporary address^and 

20 where the transmission source address of the received 
packets before the address translation processjor the 
address to update the destination of the received packets 
when the address translation process is executed, is 
registered as *£4*e^ temporary address to the address 

25 translation table. 
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Fig. 4 is a flowchart showing the procedures of the 
IP header translation process. 

The IPv4 - IPv6 translator 1 jjoiii ' loj-iir s , when packets 
arrive from any one of the networks connected,^ the receiving 

5 process with the IP packet I/O interface 12 and transfers 
the relevant message to the IP header translation module 13 . 

The IP header translation module 13 issues a query to 
replace the destination address of the received packets to 
the IP address translation information manager 15. 

10 In the IP address translation information manager 15, 

the table, searching module 154 searches the IP address 
translation table 150 to find an entry including the 

destination address of the received packets. If the entry 
including the destination address cannot be found as a 

15 result of^search, it i n rinr i i i r rfjtn the TP header translation 
module 13/^that the entry does not exist. a j 

Since the destination address is i^uplmuud^ to the 
native address from the temporary address, if the address 
for replacement does not exist, translation is no longer 

20 performed. Therefore, the IP header translation module 13 
discards the received packets by judging that the address 
translation is now impossible when it is notified that the 
entry including the destination address does not exist. 
On the other hand, when the entry including the 

25 destination address can be found as a result of^table search. 
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the table searching module 154 transfers ^contents of the 
relevant entry to the IP address checking module 153. 

The IP address checking module 153 checks ^whether jf£l 
attribute of the address to replace the destination address 
is a native address or a temporary address by referring to 
the discriminator of the temnorary address in the entry 



received. ^Whejji it is provedj i as a result of checking that 
the addressjvto replace the destination address is registered 
as febe^temporary address, the IP address checking module 153 
10 motif to the temporary IP address assignment module 14/ 
that the relevant address is fefee^ temporary address. 

The IP header translation module 13 judgoc , when it 



is notified from the IP address checking module 153 that the 
addressito replace the destination address is fehe^temporary 
15 address , /that the host which is given the relevant address 
does not exist in the destination side network and discards 
the received packets. Moreover, a message^ not if yxng that 
the packet, in which the temporary address becomes the 
destination through fctoe address translation^ s received^is 
20 transmitted to the console unit 11 through the console 
interface 17 . 

When it is proved as a result of address checking that 
the address^J:o replace the destination address is registered 
as the native address, the IP address checking module 153 
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judges this condition as the normal condition and transfers 
the relevant address to the IP header translation module 13 . 

The IP header translation module 13 t-rinnrorhr , when 
it receives an address ■ to replace the destination address 



from the IP address checking module 153 ,^a query to replace 
the transmission source address of the received packets to 
the IP address translation information manager 15, 

In the IP address translation information manager 15 , 
the table searching module 154 searches the IP address 
translation table 150 to find nwsfc an entry including the 
transmission source address of the received packets. When 
the entry including the transmission source address cannot 

be found as a result of ^search, it is^ i I, i E I "iTi'U to the IP 

header translation module 13 that the entry including the 
transmission source address does not exist. * * » 

The transmission source address is ^■■c.filauea wiL4i a 
temporary addresjs from a native address. Therefore, when 
it is - not if ied /^that the entry including the transmission 
source address does not exist, the IP header translation 
module 13 judges that the temporary address is not yet 
assigned, andj requests assignment of the temporary address 
to the IP address assignment module 14 . 

Upon reception of the request from the IP header 
translation module 13, the IP address assignment module 14 
assigns a new temporary address to the transmission source 
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address of the received packets and then registers this new 
temporary address to the IP address translation table 150. 
In this case, the discriminator of the temporary address is 
also registered to the IP address translation table 150. 

On the other hand, when the entry includinc^the 
transmission source address is found as a result of jsearch, 

ik 

the table searching module 154 transfers ) contents of the 
entry to the IP address checking module 153 . , 

The IP address checking module 153 checks^whether the 
transmission source address is a native address or a 

J* 

temporary address by referring Kthe discriminator of the 
temporary address included in the entry received. When it 



cary ac 
wed ^a £ 

is registered as tefee^ temporary address, the IP address 



is pro¥cd {as a result that the transmission source address 



checking module 153 noti f i c e J[ that the relevant address is 
^extemporary address to the IP address assignment module 

When it is fw*s**e4,^from the IP address checking 
module 153| that the transmission source address is 
temporary address, the IP header translation module 13 
judges that the host which is given the relevant address does 
not exist in the transmitting side network and discards the 
received packets. Moreover, this IP header translation 
module 13 transmits a message no t i f y 4rng t ha t the packet 
having £*f^\ temporary address as tsfe^transmission source has 
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been received -fe^the console unit 11 through the console 
interface 17 . . 

When it is proviLd ^as a result of ^address check that 
the transmission source address is registered as the native 
5 address, the IP address checking module 154 judges that it 
is in the normal state and transfers the address to replace 
the transmission source address to the IP header translation 
module 13 . 

Upon reception of the address to replace the 
10 transmission source address from the IP address checking 
module 153, the IP header translation module 13 generates 
a new IP header having the address noti f i j J* f rom the address 



checking module 153 as the destination using such address 
as the transmission source, uses the newly generated IP 

15 header in place of the IP header of the received packets, 
and then transmits the new IP packet to the destination side 
network through th e^P packet I/O interface 12. 

Operations and^transition of internal conditions of 
the IPv4 -IPv6 translator 1 when tetee^ practical network has 

20 been applied will be described sequentially. 

Fig. 5 is a schematic^diagram of fefee^ communication 
network system wherein the IPv4 network 2 and the IPv6 
network 3 are connected through the IPv4 -IPv6 translator 1. 



25 



The IPv4-IPv6 translator 1 is connected with the console 
unit 11. andjcontents of the table illustrated in Fig. 2Bare 
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displayed as required in the display screen of the console 
unit . 

The IPv4 network 2 is connected with an IPv4 DNS server 
21 and an IPv4 host 22. These devices use only the IPv4 as 



5 intercommunication protocol. Here, it is assumed that the 
IPv4 host 22 is given the IPv4 address 133.144.10.1. 

The IPv6 network 3 is connected with a DNS proxy server 
30, an IPv6 DNS server 31 and an IPv6 host 32. These devices 



10 assumed that the IPv6 host 32 is given the IPv6 address 
2001:1: :1. The IPv4 DNS server 21 performs management of 
the domain information of the IPv4 network 2 . This domain 
information assures registered correspondence between the 
host names and the IPv4 addresses^ but^ does not assure 

15 registered correspondence between the host names and the 
IPv6 addresses. 

The IPv6 DNS server 31 performs management of the 
domain information of the IPv6 network 3. This domain 
information assures registered correspondence between the 



20 host names and the IPv6 addresses^ but ^does not assure 

registered correspondence between the host names and the 
IPv6 addresses. 

The DNS proxy server 3 0 is set to transfer a query for 
the domain information of the IPv4 network 2 to the IPv4 DNS 



use only the IPv6 as -^^communication protocol. It is also 
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server 21 and to transfer a query for the domain information 

of the IPv6 network 3 to the IPv6 DNS server 31. 

The IPv4 -IPv6 translator 1 is here assumed to reserve 

254 IPv4 addresses up to 133.11.98.254 from 133.11.98.1 as 
5 the temporary IPv4 addresses to be assigned to the IPv6 

hosts. Moreover, as a prefix to generate the temporary IPv6 

address assigned to the IPv4 host, 3ffe:l: :/96 is reserved. 
In addition, in the IPv4 -IPv6 translator 1, the 

necessary address translation rule is preset to realize 
10 communication between the IPv4 DNS server 21 and the IPv4 

host 22 or DNS proxy server 30 through til we address 

translation. A . 

First, as an example of/ reception of ^Se normal 

packets by the IPv4 -IPv6 translator 1, communication 
15 between the IPv4 host 22 and the IPv6 host 32 ^considered 

Fig. 6 is a sequence diagram showing the procedures^ 
for name resolution of the IPv6 host 32 by the IPv4 host 22. 

The IPv4 host 22 transmits a message inquiring* the 
20 IPv4 address corresponding to the name of>^IPv6 host 

(hereinafter^ referred to as the "message A") to the DNS 
proxy server 30. 

The message A is translated/ by the IPv4 -IPv6 
translator 1^ to the IPv6 packet from the IPv4 packet, and 
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is then transferred to the DNS proxy server 3 0 . The DNS proxy 
server 30 transfers the message A to the IPv6 DNS server 31. 



The 1PYi6 DNS server 31 co^iuhes , upon reception of the 
message A,^the IPv4 address corresponding to the name of IPv6 
5 host 32. Since the IPv4 address is not yet registered^ 
however, a response message suggesting that such IPv4 
address is not yet registered (hereinafter^ referred to as 
the "message B") is returned to the DNS proxy server 30. 

The DNS proxy server 3 0 generates a duplicated message 
10 A because it cannot obtain the IPv4 address corresponding 
to the name of IPv6 host 32 as a result of reception of the 

jit ^ ^ 

message B^ andj^then generates a message inquiring^ the IPv6 
address corresponding to the name of IPv6 host 32 
(hereinafter^ referred to as the "message C") and transfers 

15 this message to the IPv6 DNS server 31. 

The IPv6 DNS server 31 maaai 'u hcs , upon reception of the 
message C^the IPv6 address for the name of IPv6 host 32 and 
returns the registered IPv6 address 2001:1: : 1 as a response 
message for the message B (hereinafter^ referred to as the 

20 "message D") to the DNS proxy server 30. 

The DNS proxy server 3 0 Li«uxiljiu1~Ll> , upon reception of 
the message D,jya message requesting a temporary IPv4 address 
for the address 2001:1: :1 (hereinafter^ referred to as the 



25 



"message AA") because the IPv6 address 2001:1: :1 is 
described within the message D and this address is never^IPv4 
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address being inquired ^in the message A received from the 
IPv4 host 22. 

When the message AA is received, the IPv4 -IPv6 
translator 1 searches the IP address translation table 150 
to check whether the temporary IPv4 address for the IPv6 
address 2001:1: :1 is already registered or not. However, 
the target address translation information is not yet 
registered, sBi^this ^ timing , to the IP address translation 
table 150. 

Therefore, the IPv4 -IPv6 translator 1 assigns the 
IPv4 address 133.11.98.1 as a temporary IPv4 address for the 
IPv6 address 2001:1: :1, records^ 13 3 . 11 . 98 . 1 to the area 
storing the IPv4 address in. the entry 1 of the IP address 



translation table 150 , recordg*2001 : 1 : : 1 to the area storing 
the IPv6 address, and records** to the area storing the 
discriminator of the temporary address , ^ the value — & 
indicating that the IPv4 address is the temporary address 
and the IPv6 address is the native address. 

Moreover, the IPv4-IPv6 translator 1 returnsi- to the 
- DN3 p jiuji y qpnw 3 0 - j the temporary IPv4 address 133.11.98.1 ^ 
as a response to the message AA (hereinafter^ referred to 
as the "message BB") . 

The DNS proxy server 3 0 updates the IPv6 address 
2001 : 1 : : ^described in the message Dj to the temporary IPv4 
address 133.11.98.1 and returns a response message for the 
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message A (hereinaf terp referred to as the "message E" ) to 
the IPv4 host 22 . This message E is translated, in the course 
of transfer, to the IPv4 packet from the IPv6 package by the 
IPv4-IPv6 translator 1 and is then sent to the IPv4 host 22. 

5 When the message E is received, the IPv4 host 22 

transmits an IPv4 packet of the destination address 
133.11.98.1 and the transmission source address 
133.144.10.1 (hereinafter^ referred to as the "packet a") 
to the IPv4 -IPv6 translator 1. 

10 Fig. 7 is a sequence diagram showing the flows until 

the packet a reaches the IPv6 host 32 after it has been 
transmitted from the IPv4 host. 

The IPv4 -IPv6 translator 1 roa v ctreo , upon reception 
of the packet a^the IP address translation table 150 to find 

15 e«-t the IPv6 address corresponding to the IPv4 address 
133.11.98.1. Here, it is found that the IPv6 address 
2001:1: :1 corresponding to the IPv4 address 133.11.98.1 is 
described in the entry 1 ^registered previously. 

Next, as a result of reference to the discriminator 

20 of the temporary ad^ess^of^e^y 1, it io pxov u d ^ because 
the value 0 is recorded^ ^that the IPv4 address is a temporary 
address and the IPv6 address is a native address. Namely, 
the address to replace the destination address is the native 
address under the normal condition. Therefore, the IPv6 

25 address 2001:1: :1 recorded in the entry 1 becomes the 
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destination address after the IP header translation 
process . 

Next, the IPv4 -IPv6 translator 1 searches the IP 
address translation table 150 to find da*t the IPv6 address 

5 corresponding to the IPv4 address 133.144.10.1. However, 
^fe this^ timitig , the target address translation information 
is not registered in the IP address translation table 150. 

Therefore, the IPv4 -IPv6 translator 1 adds the prefix 
3ffe:l::/96 to the IPv4 address 133.144.10.1 to newly 

10 generate the temporary IPv6 address 3f f e : 1 : : 8590 : OaOl , 
recordsj^l33 . 144 . 10 . 1 to the area for storing the IPv4 
address in the entry 2 of the IP address translation table 
150, and then records 3 f f 3 : 1 : : 8590 : OaOl to the area for 
storing the IPv6 address, and records the numeral 1 

15 indicating that the IPv6 address is fefeejj temporary address 
and the IPv4 address is the native address to the area for 
storing kinds of the temporary addresses. The IPv6 address 
3f fe : 1 :: 8590 : OaOl generated -i*i^this Limiiiy ft becomes the 
transmission source address after the IP header translation 

20 process. 

Since the addresses required for translation of 
packet a are all obtained, the IP header translation process 
is performed. Thereby, the packet a is translated to the 
IPv6 packet having the destination address 2001:1: :1 and 
25 transmission source address 3 f f e : 1 : : 8590 : OaOl . This IPv6 



\ 
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packet is transmitted to the IPv6 network 3 and reaches the 
IPv6 host 32. 

Fig. 8 is a sequence diagram showing the flows until 
the IPv4 host 22 has transmitted an IPv4 packet of the 
5 destination address 133.11.98.1 and transmission source 
address 133.144.10.1 (hereinafter j referred to as the 
"packet b") after transmission of the packet a and this IPv4 
packet reaches the IPv6 host 32. 

According to Fig. 8, the IPv4 -IPv6 translator 1 
10 jj uj.ni ll (j i v, upon reception of the packet b, ^the procedure 



described above mttfrfeli the search of the IPv6 address 
corresponding to the IPv4 address 133.144.10.1 of the 
transmission source . 

As a result of gt search of the IPv6 address of the 

15 transmission source, it is f ound^this time that the IPv6 
address 3ffe:l: :8590: OaOl corresponding to the IPv4 address 
133 . 144 .10.1 is stored in the^entry 2 rogictorod provioucly 
of the address translation table 150. 

Next, as a result of reference to the discriminator 

20 of the temporary address of entry 2, it io proved -^ because 
the value 1 is recorded, J^that the IPv6 address is a temporary 
address and the IPv4 address is a native address. Namely, 
the transmission source address before address translation 
is the native address under the normal condition. 

25 Therefore, the IPv6 address 3f f e : 1 : : 9590 : OaOa recorded to 
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the entry 2 becomes the transmission source address after 
the IP header translation process. 

Since the addresses required for translation of the 
packet b are all obtained as described above, the IP header 

5 translation process is performed and the packet b is 

translated to the IPv6 packet of the destination address 
2001:1::! and transmission source address of 
3ffe:l: :8590:0a01 and this IPv6 packet is transmitted to the 
IPv6 network 3 and then reaches the IPv6 host 32. 

10 Fig. 9 is a sequence diagram showing the flows until 

the IPv6 host 32 transmits a packet of the destination 
address of 3f f e : 1 : : 8590 : OaOl and transmission source 
address of 2001:1: :1 (hereinafter/ referred to as the 
"packet c") and this packet c reaches the IPv4 host 22. 

15 The IPv4-IPv6 translator 1 ooarehcs , upon reception 

of the packet cj^the IP address translation table 150 to find 
<aa*t the IPv4 address corresponding to the destination 
address 3 f f e : 1 : : 8590 : OaOl . As a result, it is found that 
the IPv4 address 133.144.10.1 corresponding to the IPv6 

20 address 3f fe : 1 :: 8590 : OaOl is stored in the entry 2 
registered previously. 

Next, as a result of reference to the discriminator 
of the temporary address of entry 2, it is prove d^ because 
the value 1 is recorded, jthat the IPv6 address is a temporary 

25 address and the IPv4 address is a native address. Namely, 
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the address to replace the destination address is the native 
address under the normal condition. Therefore, the IPv4 
address 133.144.10.1 recorded in the entry 2 is used as the 
destination address after the IP header translation 
process. 

Moreover, the IPv4 -IPv6 translator 1 searches the IP 
address translation table 150 to find asset the IPv4 address 
corresponding to the IPv6 address 2001:1: :1 of the 
transmission source. As a result, it can be found that the 
IPv4 address 133.11.98.1 corresponding to the IPv6 address 
2001:1: :1 is stored in the entry 1 registered previously. 

Next, as a result of reference to the discriminator 
of the temporary address of the entry 1, it i& proved^ 
because the value 0 is recorded, jthat the IPv4 address is 
a temporary address and the IPv6 address is an native 
address. Namely, the transmission destination address 
before address translation is the native address in the 
normal condition. Therefore, the IPv4 address 133.11.98.1 
recorded to the entry 1 becomes the destination address 
after the IP header translation process. 

Since the addresses required for translation of 
packet c are all obtained as described above, the IP header 
translation process is performed. Thereby, the packet c is 
translated to the IPv4 packet of the destination address 
133.144.10.1 and the transmission source address 
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133.11.98.1. This IPv4 packet is then transmitted to the 
IPv6 network 2 and reaches the IPv6 host 22. 

Next, « a first example «tjthe IPv4-IPv6 translator 

1 to rngr feve^ flrf rrri-r packets/ -±=^frs considered # thQt _fche 

A A 

5 communication is moreover extended to the IPv4 host 2 3 from 
the IPv6 network when the IPv4 host 23^ which is given the 
IPv4 address 133 . 11 . 98 . l^is connected to the IPv4 network 

2 under the condition that the communication is performed 
to the IPv6 host 32 from the IPv4 host 22. 

10 Fig. 10 is a sequence diagram showing the procedures 

when the IPv6 host 32 makes communication to the IPv4 host 
23 . 

The IPv6 host 32 transmits, to the DNS proxy server 
30, a mess^e inquiring |^the IPv6 address corresponding to 

15 the name of^IPv4 host 23 (hereinafter^ referred to as the 
"message F") . The DNS proxy server 3 0 transfers the message 
F to the IPv4 DNS server 21. This message F is translated, 
in the course of transfer, to the IPv4 packet from the IPv6 
packet by the IPv4 -IPv6 translator 1 and is then transferred 

20 to the IPv4 DNS server 21. 

When the message F is received, the IPv4 DNS server 
21 searches ^the IPv6 address corresponding to the name of 
IPv4 host 23/ ^but it return s, since the IPv6 address is not 
registered,^ response message suggesting no registration 

25 of the IPv6 address (hereinafter/ referred to as the 
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"message G") to the DNS proxy server 30. The message G is 
translated to the IPv6 packet from the IPv4 packet in the 
IPv4 -IPv6 translator 1 and is then transferred to the DNS 
proxy server 30. 

5 The DNS proxy server 30 duplicates the messag e^F , 

because the IPv6 address corresponding to the name of J(IPv4 
host 23 cannot be obtained as a result of reception of the 
message G and thereafter generates a message inquiringy^the 
IPv4 address corresponding to the name of the IPv4 host 23 

10 (hereinaf ter/ referred to as the "message H") and transfers 
this message H to the IPv4 DNS server 21. The message H is 
translated, in the course of transfer, to the IPv4 packet 
from the IPv6 packet in the IPv-IPv6 translator 1 and is then 
transferred to the IPv4 DNS server 21. 

15 Upon reception of the message H, the IPv4 DNS server 

21 searches|the IPv4 address for the name of the IPv4 host 
and returns the IPv4 address 133.11.98.1 registered to the 
DNS proxy server 30 as a response message for the message 
H (hereinafter/ referred to as the "message I") . The message 

20 I is translated, in the course of transfer, to the IPv6 
packet from the IPv4 packet in the IPv4 -IPv6 translator 1 
and is then transferred to the DNS proxy server 30. 

When the message I is received, t-hc DNO proa c y corvei 
3-9- Ll ' aii^iui L ^ i because the IPv4 address 133.11.98.1 is 

25 described in the message I and this address is not the IPv6 
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address which is inquifc u d wilgh ^the message F received from 
the IPv6 host 3 2",^a message requesting the temporary IPv6 
address corresponding to the address 133.11.98.1 to the 
IPv4 -IPv6 translator 1 (hereinafter/ referred to as the 
5 "message AAA") . 

Upon reception of the message AAA, the IPv4 - IPv6 
translator 1 searches the IP address translation table 150 
to find ©a*fc the IPv6 address corresponding to the IPv4 
address 133.11.98.1. Here, the IPv6 address 2001:1: :1 
10 corresponding to the IPv4 address is found to be stored in 
the entry 1 registered previously. 

Next, as a result of reference to the discriminator 
of the temporary address of entry 1, it. ,i. p rovodj since the 
value 0 is regis tered, Jthat the IPv4 address is a temporary 
15 address and the IPv6 address is a native address. Namely, 
the original IPv4 address is registered as fetee^ temporary 
address. Therefore, the IPv4 -IPv6 translator 1 returns a 
message suggesting that assignment of the IPv6 address has 
failed to the DNS proxy server 3 0 as fc**ejy response «feerrjjthe 
20 message AAA (hereinafter J* referred to as the "message BBB") . 

Moreover, the IPv4 -IPv6 translator 1 transmits^ to 
the console unit llj| a message suggesting that assignment 
of the temporary IPv6 address has been requested for the 
temporary IPv4 address. 
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Since the response to the temporary IPv6 address 
request has been an error response as a result of reception 
of the message BBB , the DNS proxy server 30 transmits an 
error response to the message F (hereinafter/ referred to 
as the "message J") to the IPv6 host 32. 

Here, the IPv6 host 32 stops the communication toward 
the IPv4 host 23 because the response to the address request 
has been an error response as a result of reception of the 
message J. 

Next, « a second example of reception of defective 



a malicious user makes m access to the IPv6 host 33 
connected to the IPv6 network from the IPv4 host connected 
to the IPv4 network under the condition that the 
communication is extended to the IPv6 host 32 from the IPv4 
host 22. Here, it is assumed that the IPv6 host 33 is given 
the IPv6 address 2001:1: :2. 



when the IPv4 host 24 makes communication to the IPv6 host 
using a false transmission source address 133.11.98.1. 
However, it is assumed that the exclusive temporary IPv4 
address 133.11.98.2 for the IPv6 address 2001:1: :2 is 
registered/ in the IPv4-IPv6 translator 1/ to the entry 3 
of the IP address translation table 150 through the name 
solution of the DNSias in the case of Fig. 6. 



packets by the IPv4 -IPv6 translator lj 





Fig. 11 is a sequence diagram showing the procedures^ 
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4 The IPv4 host 24 obtains the IPv4 address 13 3.11.98.2 
offydestination as in the case of Fig. 6 and transmits an IPv4 
packet ofjyfalse destination address 133.11.98.2 and 
transmission source address 133.11.98.1 (hereinafter^ 
5 referred to as the "packet d") to the IPv4 -IPv6 translator 
1 . 

When the packet d is received, the IPv4 -IPv6 
translator 1 searches the IP address translation table 150 
to find (Mat: the IPv6 address corresponding to the IPv4 

10 address 133.11.98.2. On the basis of the result of search, 
the IPv6 address 2001:1: :2 is set as the destination address 
after the IP header translation process. 

Next, the IPv4-IPv6 translator 1 searches the IP 
address translation table 150 to find the IPv6 address 

15 corresponding to the IPv4 address 133.11.98.1. Here, it is 
found that the IPv6 address 2001:1: :1 corresponding to the 
IPv4 address 133 .11.98.1 is stored in the entry 1 registered 
previously . 

Next, as a result of reference to the discriminator 
20 of the temporary address of entry 1, it is pro^cc^ because 
the value 0 is recorded, ^that the IPv4 address is a temporary 
address and the IPv6 address is a native address. Namely, 
the transmission source of packet d is registered as the 
temporary address^ which is opposed to the condition that the 
25 transmission source of receiving packet has to be the native 
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address. Therefore, the IPv4-IPv6 translator 1 discards the 
packet d. 

Moreover, the IPv4-IPv6 translator 1 transmits^ to 

the console unit 11 j a message suggesting that the packet 
5 having the temporary IPv4 address as the transmission source 

address has been received. 

Hereinafter, if the IPv4 host 24 tries to make 

communication with a host of the IPv6 network 3 using a false 

transmission source address 133.11.98.1, the communication 
10 with a host of the IPv6 network 3 cannot be realized because 

the packet is discarded in the IPv4-IPv6 translator 1 as 

described above. 

Embodiment 2 

The embodiment described above relates to fefee^mutual 
15 translation between fc**e^IPv4 address and /IPv6 address^ but 
the present invention does not depend on either kinds or 
numbers of addresses. Therefore, the present invention can 
also be adapted to tsjaee^ translator for translating an IPv4 
address to another IPv4 address ^translator for translating 
20 addresses other than fctee/ylP address and/translator for 
mutual translation among three or more kinds of addresses. 

In the case of Fig. 5, the DNS proxy server 30 is 
allocated in the IPv6 network, but it may also be allocated 
in any type of network when communication is possible for 
25 all networks connected to the address translator. Moreover, 
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it is also possible to realize co-location of the DNS proxy 
server and the address translator. 

In order to discriminate a temporary address and a 
native address among a plurality of addresses described in 

5 the individual address translation rule, a value indicating 
the kinds of temporary addresses (IPv6 address or IPv4 
address) is stored for each entry, but it is also possible, 
in place of this method, that the attribute of ^address 
(native address or temporary address) is stored for each 

10 address. 

The console unit 11 is independent of the IP network 
in Fig. l^but it is sometimes connected to an address 
translator via the IPv4 network or IPv6 network. In this 
case, the message to the console unitjwhen a fault occurs^ 

15 is transmitted through an IP packet I/O interface in place 
of an independent console interface. 

As a means to notif y^occurrence of a fault fro ski 
^brtrn i s b as^fcor , a display or an alarm lamp or an alarm sound 
generator may be provided to the address translator body as 

20 a subsidiary or substitute of the console unit 11. 

On the occasion of the address translation process, 
any one of the searches c^f^the destination address 
translation rule and transmission source address 
translation rule may be started earlier. Moreover, it may 

25 be selected freely ^that^ upon completion of the search of 
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translation rule and the address check of any one of 
destination address and transmission source address, the 

search of^ translation rule and /^address check of the other 

J* 

address a^e^ performed orAcheck of both addresses is 
5 performed after the search of J translation rule of both 
addresses is completed. 

As the profile of the second embodiment of the present 
invention, an IPv4-IPv4 translator lb will be described. 

Fig. 12 is a schematic diagram of communication 
10 network system in which the IPv4 network 2 and an IPv4 

network 4 are connected through the IPv4 -IPv4 translator lb. 
In the IPv4 -IPv4 translator lb, the console unit 11 and the 
DNS proxy server 3 0 are connected. 

In the IPv4 network 2, the IPv4 DNS server 21 and the 
15 IPv4 host 22 are connected. It is assumed here that the IPv4 
host 22 is given the exclusive IPv4 address 133.144.10.1 of 
the IPv4 network 2 . 

In the IPv4 network 4, an IPv4 DNS server 41 and an 
IPV4 host 42 are connected. It is assumed also that the IPv4 
20 host 42 is given the exclusive IPv4 address 192.168.1.1 of 
the IPv4 network 4. 

The IPv4 DNS server 21 performs management of the 
domain information of the IPv4 network 2. In this domain 
information, correspondence between the name ofjjhost and the 
25 exclusive IPv4 address of the IPv4 network 2 is registered. 
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Meanwhile, the IPv4 DNS server 41 performs management 
of the domain information of the IPv4 network 4 . In this 
domain information, correspondence between the name ofjhost 
and the exclusive IPv4 address of the IPv4 network 4 is 

5 registered. 

The DNS proxy server 3 0 is set to transfer an inquiry 
for the domain information of the IPv4 network 2 to the IPv4 
DNS server 21 and to transfer an inquiry for the domain 
information of the IPv4 network 4 to the IPv4 DNS server 41. 

10 Moreover, the DNS proxy server 3 0 makes communication with 
the IPv4 -IPv4 translator lb with the IPv6 packet. 

Here, it is assumed that 254 IPv4 addresses up to 
133.11.98.254 from 133.11.98.1 are reserved for the 
IPv4 -IPv4 translator lb as the exclusive temporary IPv4 

15 addresses of the IPv4 network 2 for assignment to the hosts 
connected to the IPv4 network 4. Moreover, it is also 
assumed that 254 IPv4 addresses up to 192.168.100.254 from 
192.168.100.1 are also reserved as the exclusive temporary 
IPv4 addresses of the IPv4 network for assignment to the 

20 hosts connected to the IPv4 network 2. 

It is further assumed that the necessary address 
translation rule is preset to the IPv4 -IPv4 translator lb 
to realize communication between the IPv4 DNS server 21, 
IPv4 host 22, IPv4 DNS server 41 and the DNS proxy server 

25 30 through the address translation. 
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Fig. 13 is a structural diagram of an IP address 
translation table 150b. One entry of this table includes 
an area 153 for storing the exclusive IPv4 address of the 
IPv4 network 2, an area 154 for storing attribute 
information of the IPv4 address, an area 155 for storing the 
exclusive IPv4 address of the IPv4 network, an area 156 for 
storing attribute of the IPv4 address, an area 157 for 
storing the temporary IPv6 address for intermediation 
between the exclusive IPv4 address of the IPv4 network 2 and 
the exclusive IPv4 address of the IPv4 network 4, and an area 
158 for storing ^attribute of the IPv6 address. When the 
addresses described in the areas 153 , 155 , and 157 are native 
addresses, the numeral 1 is recorded to the areas 154, 156, 
and 158, while the numeral 0 is recorded when these addresses 
are temporary addresses . 

The IPv4 -IPv4 translator lb generates the temporary 
IPv6 address hav added ^the prefix 3ffe:l::/96 for the 
exclusive IPv4 address of the IPv4 network 2, while the 
temporary IPv6 addr e s sj^h *w i mj ji bWc d the prefix 2001:1: :/96 
for the exclusive IPv4 address of the IPv4 network 4. i 
Accordingly, even if the IPv4 address overlapping in bothi 
IPv4 network 2 andJ(IPv4 network 4 exists, these addresses 
can be discriminated. 
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Operations and j transition of /internal condition of 
the IPv4-IPv4 translator lb^when it has been applied to^te 
practical networks^ will be described sequentially. 

Communication to the IPv4 host 42 from the IPv4 host 
5 22 will be considered first as an example of normal reception 
of £te packets by the IPv4 -IPv4 translator lb. 

Fig. 14 is a sequence diagram showing the procedures 
for name resolution of the IPv4 host 42 by the IPv4 host 22. 

The IPv4 host 2 2 transmits/ to the DNS proxy server 
10 3 0/ a message inquiring^the IPv4 address corresponding to 
the name of IPv4 host 42 (hereinaf ter/f referred to as the 
"message A") . The DNS proxy server 3 0 transfers the message 
A to the IPv4 DNS server 41. 

The IPv4 DNS server 41 returns, to the DNS proxy server 
15 30, the IPv4 address 192.168.1.1 corresponding to the name 
of IPv4 host 42 as a response message for the message A 
(hereinafter referred to as the "message D") 

When the message D is received, the DNS proxy server 
30 judges that the IPv4 address 192.168.1.1 in the message 
20 D is the exclusive address of the IPv4 network and therefore 
it cannot be received by the IPv4 network 2 and transmits 
first a message requesting the temporary IPv6 address to the 
address 192.168.1.1 (hereinafter/ referred to as the 
message "AA") to the IPv4 -IPv4 translator lb. 



1 



-46- 



The IPv4 -IPv4 translator lb ocarchoc , upon reception 
of the message AA, ^the IP address translation table 150b. 
Accordingly, it is proved that the temporary IPv4 address 
for the exclusive IPv4 address 192.168.1.1 of the IPv4 

5 network is not yet assigned. 

Therefore, the IPv4-IPv4 translator lb assigns the 
IPv6 address 2001 : 1 :: c0a8 : 0101 as temporary IPv6 

address to the IPv4 address 192 : 168 : 1 . 1 , records the address 
192.168.1.1 to the area for storing the exclusive IPv4 

10 address of the IPv4 network 4 in the entry 1 of the IP address 
translation table 150b, records the value 1 ouggco -&ariTg^that 
the relevant address is the native address to the area for 
storing attribute of the IPv4 address, records the address 
2001 : 1 : : c0a8 : 0101 to the area for storing the IPv6 address , 

15 



and records the value 0 auggos t ingi that the relevant address 
is febe^temporary address to the area for storing^attribute 
of the IPv6 address. 

Moreover, the IPv4 -IPv4 translator lb returns the 
temporary IPv6 address 2001 : 1 :: c0a8 : 0101 to the DNS proxy 
20 server 30 as a response to the message AA (hereinaf ter| 
referred to as the "message BB"). 

Upon reception of the message BB, the DNS proxy server 
3 0 transmits a message requesting the exclusive temporary 
IPv4 address of the IPv4 network 2 for the IPv6 address 
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2001 : 1 : : c0a8 : 0101 (hereinafter! referred to as the "message 
CC") to the IPv4 -IPv4 translator lb. 

When the message CC is received, the IPv4 -IPv4 
translator 1 searches the IP address translation table 150b 
and thereby it is proved that the exclusive temporary IPv4 
address of the IPv4 network 2 for the IPv6 address 
2001 : 1 :: c0a8 : 0101 is not yet assigned. 

Therefore, the IPv4 -IPv4 translator 1 assigns the 
address 133 .11.98.1 for the IPv6 address 2001 : 1 : : c0a8 : 0101 
as the exclusive temporary IPv4 address of the IPv4 network 
2, records the address 133.11.98.1 to the area for storing 
the exclusive IPv4 address of the IPv4 network 2 in the entry 
1 of the IP address translation table 150b, and records the 
value 0 sugg^S^ »g^hat the relevant address is tsteefL 
temporary address to the area for storing/attribute of the 
IPv4 address. 

In addition, the IPv4-IPv4 translator lb returns the 
exclusive temporary IPv4 address 133.11.98.1 of the IPv4 
network 2 to the DNS proxy server 3 0 as a response to the 
message CC (hereinafter! referred to as the "message DD") . 

The DNS proxy server 3 0 updates the exclusive IPv4 
address 192.168.1.1 of the IPv4 network 4 described in the 
message D to the exclusive temporary IPv4 address 
133.11.98.1 of the IPv4 network 2 and returns a response 
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message to the message A (hereinafter f referred to as the 
"message E") to the IPv4 host 22. 

Upon reception of the message E, the IPv4 host 22 
transmits the IPv4 packet of the destination address 
133.11.98.1 and transmission source address 133.144.10.1 
(hereinafter^ referred to as the "packet a") to the 
IPv4 - IPv6 translator lb . 

Fig. 15 is a sequence diagram showing the flows until 
the packet a reaches the IPv4 host 42 after it is transmitted 
from the IPv4 host 22. 

When the packet a is received, the IPv4-IPv4 
translator lb searches the IP address translation table 150b 
and obtains, from the entry 1, the exclusive IPv4 address 
192.168.1.1 of the IPv4 network 4 corresponding to the 
exclusive IPv4 address 133.11.98.1 of the IPv4 network 2. 

Next, as a result of reference to the attribute 
information of the exclusive IPv4 address of the IPv4 
network 4 of the entry 1, it is proved that the value 1 
■4Mtjij^ ^i -TT-t^ Mip native address is recorded under the normal 
condition . 

Next, the IPv4 -IPv4 translator lb searches the IP 
address translation table 150b to find eowt the exclusive 
IPv4 address of the IPv4 network 4 corresponding to the 
exclusive IPv4 address 133.144.10.1 of the IPv4 network 2. 
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As a result, it is proved that the target address translation 
information is not yet registered. 

Therefore, the IPv4 -IPv4 translator lb assigns the 
temporary IPv6 address 3f f e : 1 : : 8590 : OaOl for the IPv4 
address 133.144.10.1, records the address 133.144.10.1 to 
the area for storing the exclusive IPv4 address of the IPv4 
network 2 in the entry 2 of the IP address translation table 
150b, records the value 1 ouggpfhtii ng^ that the relevant 
address is the native address to the area for storing^ 
attribute of the IPv4 address, records the address 
3f f e : 1 : : 8590 : OaOl to the area for storing the IPv6 address 



and records the value 0 ouggooting ^that the relevant address 
is tiaft^temporary address to the area for storing^attribute 
of the IPv6 address. 

Next, the IPv4 -IPv4 translator lb assigns the address 
192.168.100.1 as the exclusive temporary address IPv4 
address of the IPv4 network 4 for the IPv6 address 
3ffe:l: :8590:0a01, records the address 192.168.100.1 to the 
area for storing the exclusive IPv4 address of the IPv4 
network 4 in the entry 2 of the IP address translation table 



150b and records the value 0 g-uggoo ting | that the relevant 
address is te**e ^temporary address to the area for storing^ 
attribute of the IPv4 address. 

Based on the above result, the packet a is translated 
to the IPv4 packet of the destination address 192.168.1.1 
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and transmission source address 192 . 168 . 100 . 1 ^transmitted 
to the IPv4 network 4 and reaches the IPv4 host 42. 

Next, a first example ^horo^ the IPv4 -IPv4 

translator lb receives a defective packet f cney eji^ 
consideredJ^ere^Hmat communication is extended to the IPv4 
host 23 from the IPv4 network 4 under the condition that 
communication is extended to the IPv4 host 42 from the IPv4 
host 22 and moreover the IPv4 host 23 which is given the IPv4 
address 133.11.98.1 is connected to the IPv4 network 2. 

Fig. 16 is a sequence diagram showing the procedures 
for making communication to the IPv4 host 23 from the IPv4 
host 42. * 

The IPv4 host 42 transmits a message inquiring^ the 
IPv4 address corresponding to the name of IPv4 host 23 
(hereinafter J referred to as the "message F") to the DNS 
proxy server 30. This DNS proxy server 30 transfers the 
message F to the IPv4 DNS server 21. 

The IPv4 DNS server 21 returns the IPv4 address 
133.11.98.1 for the name of IPv4 host 23 to the DNS proxy 
server 3 0 as a response message for the message F 
(hereinafter/ referred to as the "message G") . 

The DNS proxy server 30 judges, upon reception of the 
message G, that the IPv4 address 133.11.98.1 in the relevant 
message is the exclusive address of the IPv4 network 2 and 
therefore cannot be used in the IPv4 network 4 . Accordingly, 
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the DNS proxy server 30 transmits a message^ to the IPv4 -IPv4 
translator lbjf requesting the temporary IPv6 address for the 
address 133.11.98.1 (hereinafter f referred to as the 
"message AAA") . 

5 When the message AAA is received, the IPv4 -IPv4 

translator lb searches the IP address translation table 150b 
and obtains, from the entry 1, the exclusive IPv4 address 
192.168.1.1 of the IPv4 network 2 corresponding to the 
exclusive IPv4 address 133.11.98.1 of the IPv4 network 4. 

10 Next, as a result of reference to the attribute 

information of the exclusive IPv4 address of the IPv4 
network 2 of the entry 1, it is proved that the value 0 
au g rgoc ting b &e ^temporary address is recorded, ^o ppoowig to 
the condition fe*»t^ the destination address after the IP 

15 header translation process has to be the native address. 
Therefore, the IPv4 -IPv4 translator lb returns, to the DNS 
proxy server 30, a response to the message AAA suggesting 
that assignment of the temporary IPv6 address has failed 
(hereinafter | referred to as the "message BBB " ) . 

20 Moreover, the IPv4 -IPv4 translator lb transmits, to 

the console unit 11, a message requesting assignment of the 
temporary IPv6 address for the temporary IPv4 address. The 
DNS proxy server 3 0 tranomito , as a result of reception of 
the message BBB^an error response to the message F 
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(hereinaf ter | referred to as the "message J") to the IPv4 
host 42. 



The IPv4 host 42 duopagida , as a result of reception 
of the message J, ^the communication to the IPv4 host 23 
because the response to the address inquiry has been proved 
as an error response. 



Next, *£h a second example whcgoJ the IPv4 - IPv4 



translator lb receives a defective packet^ 
considered.Herev LU c it a malicious user tries to make access 
to the IPv4 host 43 connected to the IPv4 network 4 from the 
IPv4 host 24 connected to the IPv4 network 2 under the 
condition that communication is extended to the IPv4 host 
42 from the IPv4 host 22. The IPv4 host 43 is assumed here 
to be given the IPv4 address 192.168.1.2. 

Fig. 17 is a sequence diagram showing the procedures 
for making communication to the IPv4 host 43 from the IPv4 
host 24 using the false transmission source address 
133.11.98.1. It is also assumed, in the IPv4-IPv4 
translator lb, as in the case of Fig. 14, that the exclusive 
temporary IPv4 address 13 3 . 11 . 98 . 2 of the IPv4 network 2 for 
the exclusive IPv4 address 192.168.1.2 of the IPv4 network 
4 is registered, through the name solution of^DNS, to the 
entry 3 of the IP address translation table 150b. 

As in the case of Fig. 14, the IPv4 host 24 obtains 
the exclusive IPv4 address 133.11.98.2 of the IPv4 network 
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2 of the destination and transmits a false IPv4 packet of 
the destination address 133.11.98.2 and transmission source 
address 133.11.98.1 (hereinafter! referred to as the 
"packet d") to the IPv4 -IPv4 translator lb. 

Upon reception of the packet d, the IPv4 -IPv4 
translator lb searches the IP address translation table 150b 
and obtains, from the entry 3, the exclusive IPv4 address 
of the IPv4 network 4 corresponding to the exclusive IPv4 
address 133.11.98.2 of the IPv4 network 2. 

Moreover, as a result of reference to the attribute 
information, it is proved that the value l^ ouggocting the 
native address is recorded under the normal condition. 

Next, the IPv4 -IPv4 translator lb searches the IP 
address translation table 150b and obtains the exclusive 
IPv4 address 192 . 168 .1.1 of the IPv4 network 4 corresponding 
to the exclusive IPv4 address 133.11.98.1 of the IPv4 
network 2. 

Moreover, as a result of reference to the attribute 
information of the exclusive Ipv4 address of the IPv4 
network 2 of the entry 1, it is proved that the value 0 
^i . iggont^ng^l re jytemporary address is recorded, ^Jjuijjusxng to 
the condition ^tetjthe transmission source of the receiving 
packet has to be the native address. Here, the IPv4 -IPv4 
translator lb discards the packet d. 
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In addition, the IPv4 -IPv4 translator lb also 
transmits, to the console unit 11, a message suggesting that 
fe**ej^packet having the temporary IPv4 address as the 
transmission source address has been received. 

Thereafter, if the IPv4 host 24 tries -fete $± - > fy 4j ^ 
communication with hosts of the IPv4 network 4 using the 
false transmission source address 133.11.98.1, the packets 
are discarded by the IPv4 -IPv4 translator lb^as described 
above. Accordingly, communication with hosts of the IPv4 
network 4 using a false address cannot be realized. 

The address translator of the present invention is 
provided with a function to check the translation source 
address before translation and t^e destination address 
after translation at the time of ^address translation 
process. Therefore, this address translator can prevent 
transmission of packets having no dest inat ion and 
transmission source addresses and thereby^can also prevent 
giving^ adverse effect to the networks. 

Moreover, since reception of the relevant packets is 
h on IM^rl Ay^ an administrator, the administrator can 
recognize) erroneous setting of ^temporary address used for 
address translation and address spoofing of hosts having a 
false address through malicious use of^temporary address and 
can also quickly take the appropriate measures. 



